Software Development Engineer (SailPoint Administrator)

CVS Health

3d•$64,890 - $173,040

About The Position

The Software Development Engineer (SDE) will be responsible for designing, developing, testing, and maintaining the enterprise Identity Governance and Administration (IGA) platform that supports CVS Health's Healthcare Delivery (HCD) division, spanning Signify Health, Oak Street Health, and RubiconMD. This role partners closely with Compliance, Identity Architecture, Network Operations, and Security teams to deliver reliable, secure, and auditable identity and access management solutions. The engineer will contribute to core IAM platform services built on SailPoint Identity Security Cloud, including provisioning workflows, lifecycle automation, role-based access control (RBAC), access certification, and compliance reporting, while ensuring adherence to enterprise standards and best practices.

Requirements

3+ years of SailPoint Engineering experience building enterprise-grade applications and services.
2+ years of hands-on SailPoint experience (IdentityNow / Identity Security Cloud).
Ability to independently configure and troubleshoot SailPoint connectors, rules, transforms, and workflows from day one.
Hands-on experience with identity provisioning architectures spanning HRIS, directory services, and identity providers (e.g., Workday, Active Directory, Okta).
Understanding of software design patterns, scalable system design, and data modeling as applied to identity governance.
Experience building and maintaining Joiner/Mover/Leaver/Rehire/Inactive lifecycle workflows and Role-Based Access Control (RBAC) models.
Strong analytical, problem-solving, and troubleshooting skills, including the ability to diagnose issues across multiple connected identity systems.
Ability to work effectively in Agile/Scrum development environments.
Excellent written and verbal communication skills with the ability to collaborate across technical, compliance, and business teams.

Nice To Haves

Experience supporting SOX, SOC2, or HiTrust compliance programs, including access certification campaigns, Separation of Duties (SoD) reporting, and Periodic Access Reviews (PAR), and NIST framework.
Experience in a multi-tenant or multi-company (M&A-integrated) identity environment, including cross-corporate access patterns.
Familiarity with Okta Workforce administration and AD-to-IDP provisioning flows.
Experience developing and consuming RESTful APIs and working with JSON-based integrations.
Familiarity with Neo4j or graph-based identity stores and Azure-hosted identity infrastructure.
Exposure to healthcare or other highly regulated industries with secure data handling practices.
SailPoint IdentityNow/ISC certifications.
Experience leading technical initiatives or mentoring engineers on identity governance best practices.
Knowledge of CI/CD pipelines, source control systems (Git/GitHub), and automated deployment practices as applied to IAM platform configuration and code.

Responsibilities

Designing, developing, testing, and maintaining the enterprise Identity Governance and Administration (IGA) platform.
Partnering closely with Compliance, Identity Architecture, Network Operations, and Security teams.
Delivering reliable, secure, and auditable identity and access management solutions.
Contributing to core IAM platform services built on SailPoint Identity Security Cloud.
Implementing provisioning workflows, lifecycle automation, role-based access control (RBAC), access certification, and compliance reporting.
Ensuring adherence to enterprise standards and best practices.